Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
File:                     31FHCxXowUGvL6hGoowDs4WRurQ.mft (raw, json)
Hash identifier:          zf28TkEdu3IweZSsmhJkf6ibpH43wcl39mJ13mJ9J1c=
Subject key identifier:   71:E4:51:82:3A:B0:4F:D7:F6:17:7F:7C:99:D8:E3:69:59:71:1C:E5
Authority key identifier: DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4
Certificate issuer:       /CN=A91DB7E9/serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
Manifest number:          0142
Signing time:             Fri 13 Jun 2025 03:26:07 +0000
Manifest this update:     Fri 13 Jun 2025 03:26:07 +0000
Manifest next update:     Fri 20 Jun 2025 03:26:07 +0000
Files and hashes:         1: 31FHCxXowUGvL6hGoowDs4WRurQ.crl (hash: FJKHi5qWrLpoJafSHYIYMkOBh1X4t1uvt1wqr6tieYM=)
                          2: 7B50FA5EA13911EF8B634635C4F9AE02.roa (hash: J8+lxSFWmAdItoP7AGJ9n1czEhUKmEFacTRv8zqHb88=)
                          3: 367E2CC86E2F11EE9F5DEF32C4F9AE02.roa (hash: mZ/f/kYNljSI/Y1NgwFenBb3960hqwOok7c22vWxduM=)
                          4: 361777766E2F11EE9F5DEF32C4F9AE02.roa (hash: LjDyklpsY4tER3qyvIF/MVWeA44K8qWvTHC+14bUFS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7E9, serialNumber=DF51470B15E8C141AF2FA846A28C03B38591BAB4
        Validity
            Not Before: Jun 13 03:26:07 2025 GMT
            Not After : Jun 20 03:26:07 2025 GMT
        Subject: CN=684b9a4f-7ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:bf:24:66:c1:9d:e2:37:eb:a5:f3:d4:20:
                    03:ad:d5:81:2d:fe:be:05:4b:11:91:8a:6b:6a:15:
                    2a:3a:0f:13:7d:d0:83:b4:09:0e:ac:75:1b:42:3d:
                    0d:e1:c7:f4:47:f0:6d:fd:28:3a:91:b0:f3:a8:16:
                    2c:8c:9c:fe:12:f8:cc:67:b1:bb:3c:85:ae:97:0d:
                    32:78:56:1e:eb:93:b3:40:dc:5e:f9:77:38:c2:a9:
                    19:ba:50:31:7d:8f:31:91:67:38:b2:3f:a8:c0:90:
                    0c:3b:33:34:74:0e:26:14:7a:85:4d:cf:cf:39:f9:
                    34:df:d0:4e:47:88:66:d2:b6:ae:8a:d7:1c:3a:94:
                    0b:46:40:98:ea:fa:37:a8:1b:a4:f8:4b:3d:af:8b:
                    21:58:fb:79:a9:7a:7b:77:82:35:9c:dd:f7:e6:70:
                    3e:23:3e:82:9f:f8:00:47:42:4f:9d:f0:b4:ab:b0:
                    cb:45:a8:19:e6:57:93:36:d5:53:da:8e:fc:e2:ca:
                    c0:45:aa:3e:56:c1:a5:3b:e1:41:de:5d:17:1b:bd:
                    a8:44:b7:32:79:36:75:44:7b:7d:e2:f3:6c:cb:55:
                    36:5f:fc:f2:eb:52:c0:d0:6c:eb:a3:e2:95:79:9e:
                    93:99:57:1b:44:0f:ef:0c:5b:e3:e6:23:04:04:5a:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:51:82:3A:B0:4F:D7:F6:17:7F:7C:99:D8:E3:69:59:71:1C:E5
            X509v3 Authority Key Identifier:
                keyid:DF:51:47:0B:15:E8:C1:41:AF:2F:A8:46:A2:8C:03:B3:85:91:BA:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FHCxXowUGvL6hGoowDs4WRurQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7E9/E99E7F526E2E11EE85D92D32C4F9AE02/31FHCxXowUGvL6hGoowDs4WRurQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:90:58:ef:ac:2e:e7:02:e3:29:01:4b:b1:5c:64:75:0d:66:
         89:ed:fd:96:4c:0b:91:a8:10:29:3e:8d:cb:42:1c:54:e5:ad:
         cc:40:89:e0:99:99:69:42:b7:71:29:fa:fa:f2:8e:4a:4e:0d:
         fc:25:6f:0a:c0:7d:93:d1:0b:e9:9b:45:4c:a7:83:4d:81:4d:
         da:cc:b6:ed:5a:5a:e4:0d:c9:a5:08:fa:3c:61:ba:3b:4b:07:
         fd:72:a3:80:4c:ca:72:4b:34:f0:de:3b:47:42:fe:06:4e:95:
         1f:f5:65:b2:85:03:16:88:fb:46:2d:7b:77:79:cf:47:fd:0f:
         f2:1b:67:9b:cb:89:12:d5:ba:9b:23:e6:50:36:e5:98:1c:00:
         d8:91:dc:55:ab:36:80:a3:93:b2:14:42:6e:50:7e:62:c9:e0:
         a7:74:57:85:3c:c5:2d:ef:ea:b9:85:33:b3:cd:35:9e:3b:89:
         48:59:35:81:5d:11:6e:f3:43:f0:1e:b2:70:c1:3a:8f:0e:5f:
         8b:44:21:e9:78:c3:f5:65:b2:23:42:06:99:7e:f6:ad:ab:bf:
         40:9d:3a:e3:87:1b:ea:db:70:66:11:60:2c:71:94:eb:b2:4b:
         16:38:b2:38:98:15:b1:d9:de:d2:c4:35:4e:53:a0:f7:a0:b2:
         da:22:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:21:46 2025 by rpki-client